Job Description Summary
The Senior Specialist – Control Assessments is responsible for performing independent project and technology control assessments, identifying control gaps and technology risks, evaluating compliance with internal policies and industry standards, and supporting remediation activities to strengthen the organization's overall risk and control environment. The role supports the delivery of IT Compliance and Control Assessment services across applications, platforms, cloud environments, infrastructure, digital solutions, and emerging technologies
Job Description
#Hybrid
Key Responsibilities :
Perform risk-based Control Assessments and support the delivery of IT Compliance and Risk Assurance services.
Evaluate control design and operating effectiveness against applicable policies, standards, and control requirements.
Identify control gaps, compliance deficiencies, and potential technology risks.
Recommend practical and risk-based remediation actions to address identified issues.
Align findings, recommendations, and remediation plans with business, security, compliance, and technology stakeholders.
Track remediation activities through closure and validate evidence supporting issue resolution.
Support continuous improvement initiatives, automation opportunities, and control monitoring activities.
Contribute to awareness sessions, training programs, and enhancement of assessment methodologies and guidance materials.
Ensure adherence to Information Security, Risk, Compliance, and Governance policies and procedures within the scope of assigned responsibilities.
Essential Requirement -
Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, Accounting, or a related discipline.
5–7 years of experience in IT Audit, IT Risk Management, IT Compliance, Information Security, Internal Controls, or related fields.
Strong hands-on experience in IT control testing, risk assessments, compliance reviews, or security assessments.
Experience with SOX compliance and IT General Controls (ITGCs).
Strong understanding of risk management principles, internal control frameworks, and cybersecurity concepts.
Excellent analytical, stakeholder management, communication, and report-writing skills.
Experience with SOX, SOC1, SOC2, NIST, ISO 27001, COBIT, PCI DSS, GxP, or similar compliance frameworks.
Desirable Requirement -
Big 4 consulting experience.8–10 years of experience within large corporate environments..
Professional certifications such as CISA, CISM, CRISC, CISSP, or equivalent.
Commitment to Diversity & Inclusion
We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
Accessibility and accommodation
Novartis is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to perform the essential functions of a position, please send an e-mail to [email protected] and let us know the nature of your request and your contact information. Please include the job requisition number in your message.
Skills Desired
Business Acumen, Influencing Skills, Information Security Risk Management, IT Governance, Stakeholder ManagementSkills Required
- Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, Accounting, or a related discipline
- 5-7 years of experience in IT Audit, IT Risk Management, IT Compliance, Information Security, Internal Controls, or related fields
- Hands-on experience in IT control testing, risk assessments, compliance reviews, or security assessments
- Experience with SOX compliance and IT General Controls (ITGCs)
- Understanding of risk management principles, internal control frameworks, and cybersecurity concepts
- Experience with SOX, SOC 1, SOC 2, NIST, ISO 27001, COBIT, PCI DSS, GxP, or similar compliance frameworks
- Excellent analytical, stakeholder management, communication, and report-writing skills
- Big Four consulting experience
- 8-10 years of experience within large corporate environments
- Professional certification such as CISA, CISM, CRISC, CISSP, or equivalent
Novartis Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Novartis and has not been reviewed or approved by Novartis.
-
Healthcare Strength — Pay and benefits are described as a strong overall package, supported by medical, dental, and vision insurance alongside FSAs/HSAs and disability and life coverage. Mental-health support is reinforced through an employee assistance program with psychological support and a network of mental health first aiders.
-
Retirement Support — Retirement support is positioned as a standout element, with an automatic company contribution plus dollar-for-dollar matching in the 401(k). Additional retirement funding is described through an age-based defined contribution program and access to an employee share purchase plan discount.
-
Parental & Family Support — Family-related benefits are framed as robust, including a global minimum of paid parental leave for new parents following birth or adoption. Added supports include domestic partner coverage, dependent-care resources, and benefits such as adoption assistance and child/elder care options.
Novartis Insights
What We Do
Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million people worldwide.
